Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/323430313a636130303a3a2f33322d3332203d3e203233383431.roa
File:                     323430313a636130303a3a2f33322d3332203d3e203233383431.roa (raw, json)
Hash identifier:          Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=
Subject key identifier:   EA:B7:F7:DC:71:5A:8B:3B:85:D6:60:95:68:D2:00:0F:85:1F:31:7D
Certificate issuer:       /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial:       57A35D8F77E7A0CD8041050FC37314BCCFB4D21C
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/323430313a636130303a3a2f33322d3332203d3e203233383431.roa
Signing time:             Wed 15 Apr 2026 01:17:05 +0000
ROA not before:           Wed 15 Apr 2026 01:12:05 +0000
ROA not after:            Wed 14 Apr 2027 01:17:05 +0000
asID:                     23841
IP address blocks:        2401:ca00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a3:5d:8f:77:e7:a0:cd:80:41:05:0f:c3:73:14:bc:cf:b4:d2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
        Validity
            Not Before: Apr 15 01:12:05 2026 GMT
            Not After : Apr 14 01:17:05 2027 GMT
        Subject: CN=EAB7F7DC715A8B3B85D6609568D2000F851F317D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:41:d1:b4:3c:86:ea:cd:36:3c:f0:a8:3b:
                    23:c7:a9:3c:2f:ed:86:c0:f2:ec:22:76:f2:75:b4:
                    ff:ef:d6:67:94:86:14:a2:db:c6:dc:8f:e3:7f:df:
                    25:ca:d7:59:d9:1b:28:6f:d0:17:67:33:52:1a:c0:
                    06:b7:ff:23:02:ed:8b:22:e5:d0:e0:b6:47:0b:9a:
                    72:02:62:b1:c4:f5:af:d6:93:4e:f8:fe:8d:ad:f5:
                    1f:b3:45:1b:47:db:a9:90:12:a8:25:00:56:3e:90:
                    4c:e7:86:8f:f4:be:5a:cf:1c:b4:cf:73:74:a2:d4:
                    62:72:cd:82:de:e4:17:39:07:a7:67:cb:b4:16:6d:
                    86:63:7c:7d:47:ec:79:f4:72:2c:fd:34:45:9d:0d:
                    04:32:c9:9d:a4:9f:f0:78:53:ce:b8:d9:64:a7:f7:
                    0c:a3:5c:25:5f:12:3b:da:8c:b3:c5:b1:be:ea:a1:
                    73:59:9d:bd:41:db:6e:81:b6:93:bb:6a:92:d8:31:
                    72:87:c0:b6:24:2b:71:bb:e2:bc:54:c7:20:11:50:
                    83:be:1f:db:89:99:3a:b9:0b:fc:b9:a0:46:ea:3e:
                    c8:72:47:a6:a3:bc:30:c3:8a:81:eb:55:b4:af:0a:
                    d1:0f:76:e1:fb:9f:ec:9a:06:78:f6:48:0e:20:7e:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B7:F7:DC:71:5A:8B:3B:85:D6:60:95:68:D2:00:0F:85:1F:31:7D
            X509v3 Authority Key Identifier:
                keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/323430313a636130303a3a2f33322d3332203d3e203233383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:45:1f:fe:a5:20:0b:18:b8:9c:c0:a8:53:5d:85:b9:67:71:
         09:96:23:f2:a7:2a:bc:9e:e1:7c:10:c1:1d:e2:a9:07:8d:7a:
         8f:e0:cc:c8:91:71:91:9f:87:cc:f3:ee:cf:9a:65:40:7d:8c:
         ff:8a:c5:03:ce:66:9d:dd:59:64:f8:32:10:b9:cb:54:c4:f3:
         9a:49:dd:bd:03:ce:65:03:d7:b6:07:4d:9b:d1:9a:c5:e3:9b:
         f1:22:57:d5:f6:e7:67:50:24:34:fd:b1:0d:fb:6c:ac:27:8f:
         5a:0f:9a:0f:ec:5a:25:a6:d6:70:0c:f9:54:b9:a2:57:bc:e1:
         d5:cc:20:2d:5e:3f:88:2f:9a:d8:17:77:e4:6b:68:d3:d1:2f:
         95:e1:c5:e1:e0:d1:2f:2b:e9:5d:61:02:57:31:f7:18:17:bf:
         7a:5e:81:89:5c:36:5e:1f:88:c5:4f:d6:8a:87:66:11:f5:52:
         af:06:e8:e6:33:00:02:75:d5:fd:4b:9a:a5:2e:0b:89:0d:a1:
         aa:b9:bf:d6:87:78:fc:bd:a8:95:9f:6b:dc:42:51:39:8b:90:
         a1:e4:38:dd:94:1a:20:3f:98:6f:4c:50:9a:cd:7d:4c:3d:69:
         1f:91:3e:ca:88:80:2e:0d:51:83:bf:36:5e:8d:83:ab:88:1a:
         80:0b:14:74
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUV6Ndj3fnoM2AQQUPw3MUvM+00hwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1
MUQzMTM1RDAeFw0yNjA0MTUwMTEyMDVaFw0yNzA0MTQwMTE3MDVaMDMxMTAvBgNV
BAMTKEVBQjdGN0RDNzE1QThCM0I4NUQ2NjA5NTY4RDIwMDBGODUxRjMxN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2FkHRtDyG6s02PPCoOyPHqTwv
7YbA8uwidvJ1tP/v1meUhhSi28bcj+N/3yXK11nZGyhv0BdnM1IawAa3/yMC7Ysi
5dDgtkcLmnICYrHE9a/Wk074/o2t9R+zRRtH26mQEqglAFY+kEznho/0vlrPHLTP
c3Si1GJyzYLe5Bc5B6dny7QWbYZjfH1H7Hn0ciz9NEWdDQQyyZ2kn/B4U8642WSn
9wyjXCVfEjvajLPFsb7qoXNZnb1B226BtpO7apLYMXKHwLYkK3G74rxUxyARUIO+
H9uJmTq5C/y5oEbqPshyR6ajvDDDioHrVbSvCtEPduH7n+yaBnj2SA4gfn4dAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQU6rf33HFaizuF1mCVaNIAD4UfMX0wHwYDVR0j
BBgwFoAUfwT2/OInUGB+VOVY4Dng9VHTE10wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYwMzIwNDQyNDEwNTk4Ni8wLzdGMDRGNkZDRTIyNzUwNjA3RTU0RTU1OEUwMzlF
MEY1NTFEMzEzNUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1MUQzMTM1RC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NjAzMjA0NDI0MTA1OTg2LzAvMzIzNDMwMzEzYTYz
NjEzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMzM4MzQzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQBygAwDQYJKoZIhvcNAQELBQADggEBAGpFH/6lIAsYuJzAqFNdhblncQmW
I/KnKrye4XwQwR3iqQeNeo/gzMiRcZGfh8zz7s+aZUB9jP+KxQPOZp3dWWT4MhC5
y1TE85pJ3b0DzmUD17YHTZvRmsXjm/EiV9X252dQJDT9sQ37bKwnj1oPmg/sWiWm
1nAM+VS5ole84dXMIC1eP4gvmtgXd+RraNPRL5XhxeHg0S8r6V1hAlcx9xgXv3pe
gYlcNl4fiMVP1oqHZhH1Uq8G6OYzAAJ11f1LmqUuC4kNoaq5v9aHePy9qJWfa9xC
UTmLkKHkON2UGiA/mG9MUJrNfUw9aR+RPsqIgC4NUYO/Nl6Ng6uIGoALFHQ=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:59 2026 by rpki-client